← All credits
Nabil Irawan | Patchstack Bug Bounty Program
624 vulnerability records and advisories credit this contributor.
CVE-2026-22483
WordPress teachPress plugin <= 9.0.12 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-22482
WordPress IMGspider plugin <= 2.3.12 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-22481
WordPress BD Courier Order Ratio Checker plugin <= 2.0.1 - Broken Access Control vulnerability
CVE-2026-22466
WordPress WP MapIt plugin <= 3.0.3 - Broken Access Control vulnerability
CVE-2026-22463
WordPress Form to Chat App plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-22462
WordPress Add Polylang support for Customizer plugin <= 1.4.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-22459
WordPress WordPress CTA plugin <= 2.1.2 - Broken Access Control vulnerability
CVE-2026-22348
WordPress Civic Cookie Control plugin <= 1.53 - Broken Access Control vulnerability
CVE-2026-27090
WordPress Kenta Companion plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-25462
WordPress avalex plugin <= 3.1.3 - Broken Access Control vulnerability